Sicherheitsarchitektur
4-Schichten-Modell
- Schicht 1: Zugriffskontrolle (Capabilities, Scope-Isolation)
- Schicht 2: Transport-Sicherheit (.htaccess, PHP-Middleware)
- Schicht 3: Verschlüsselung At Rest (AES-256-GCM)
- Schicht 4: Audit und Compliance (Logging, GDPR)
Verschlüsselungslevel
| Level | Beschreibung | Schlüssel |
|---|---|---|
| 0 NONE | Keine Verschlüsselung | – |
| 1 BASIC | AES-256-GCM | Server Master Key |
| 2 ENHANCED | AES-256-GCM | User Password Key |
| 3 YUBIKEY | AES-256-GCM | Yubikey HMAC |